$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: v89eB7AtqqrbH45HF0Tfy5jXlss66ZqM5aw76CI2fSg= Subject key identifier: EB:59:B0:F6:21:91:1E:45:65:F2:C2:FE:F3:A7:E5:71:AC:98:F1:7B Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 1191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 1186 Signing time: Fri 30 May 2025 17:24:16 +0000 Manifest this update: Fri 30 May 2025 17:24:15 +0000 Manifest next update: Fri 06 Jun 2025 17:24:15 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: gv48szZlGOFzDjBpCmCPdVxFfhipILn/QKYhRTk4bRI=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: pWwzKrBi4ex9pqtRPtIPRabSwqTwDTnYV8iW2v8i1Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4497 (0x1191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: May 30 17:24:15 2025 GMT Not After : Jun 6 17:24:15 2025 GMT Subject: CN=6839e9bf-9355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:cf:91:ba:53:33:82:55:2d:b2:eb:40:b2: 79:e7:61:89:78:94:43:f9:c3:9a:9c:e7:bc:68:82: 86:ee:01:44:fb:04:d6:d4:89:e8:87:19:cc:6d:f8: bd:8d:c6:de:98:43:4a:3e:ff:80:86:3d:4b:82:8a: 47:91:f1:70:29:44:d1:a0:82:70:9b:c9:8e:67:8e: b8:02:8c:61:38:6f:d2:40:26:e0:92:d5:45:fa:a8: f8:55:8d:34:92:14:e2:22:f8:9b:d3:8a:96:28:69: dd:9a:74:2a:7f:42:02:bc:00:6f:be:ac:6f:33:ca: 72:6c:3e:dd:24:8c:be:36:84:45:e1:40:bd:4c:a0: 7a:ea:9b:ad:db:d6:9c:6e:3d:7a:85:1b:5b:d7:29: 58:5a:ad:64:21:d5:eb:30:ea:c3:eb:52:10:ce:07: 30:2d:48:f3:62:fb:57:da:f2:cc:da:81:58:48:03: 5b:16:e9:e3:f0:a5:0f:3e:38:2a:c3:1c:e8:ce:20: b7:7d:7f:fb:27:d1:1f:a6:4a:94:5a:90:d3:7f:05: 40:28:62:e6:91:d7:e3:73:82:f4:a2:0c:b7:c0:b5: f6:ba:94:04:34:0b:db:64:67:df:89:b6:28:87:f1: 05:2c:1c:84:5a:41:5e:fe:6c:b6:06:68:6e:7c:99: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:59:B0:F6:21:91:1E:45:65:F2:C2:FE:F3:A7:E5:71:AC:98:F1:7B X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:63:9f:96:84:9c:e7:d5:c2:10:d2:c0:91:5d:8b:fc:b3:b0: ee:ee:80:c8:94:cf:94:10:33:0c:db:94:14:5c:44:4c:6a:27: bf:58:3d:3d:26:5b:68:93:93:bc:ee:26:fb:a0:b3:2c:00:79: 29:30:7c:12:2f:63:c1:29:05:47:55:e6:84:8b:56:1e:4b:e0: 85:43:82:e0:1a:d1:ff:d5:1f:2b:86:39:cd:ab:79:cf:ca:e0: 6a:d3:a5:ce:f1:ff:de:69:d0:d5:36:09:41:e0:6e:d4:0c:a0: 29:b4:1a:f3:36:91:ba:9d:20:67:37:e1:c2:31:07:71:80:94: e3:fe:99:b4:fb:50:a5:ee:82:74:cb:c1:3a:f6:df:88:00:57: 58:aa:44:ba:74:04:ad:84:15:a0:bf:52:86:f9:6a:d3:55:6f: 33:9f:f8:21:e5:bd:91:19:a2:36:04:98:02:ed:85:c0:03:e4: 35:60:d9:d8:59:db:e1:bc:68:c8:44:91:ab:6d:86:09:a5:b5: 15:7f:12:56:39:d7:2c:30:55:fc:ef:88:a7:0b:c8:0a:c5:a3: 2e:ff:94:05:8b:7e:f4:75:0b:c4:34:1c:5a:a4:50:11:51:2d: 07:a3:ff:39:ab:a2:82:79:c4:92:f3:ea:5d:27:a3:38:47:b1: b1:ec:83:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUwNTMwMTcyNDE1WhcNMjUwNjA2MTcyNDE1WjAYMRYwFAYD VQQDEw02ODM5ZTliZi05MzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSnPkbpTM4JVLbLrQLJ552GJeJRD+cOanOe8aIKG7gFE+wTW1InohxnMbfi9 jcbemENKPv+Ahj1LgopHkfFwKUTRoIJwm8mOZ464AoxhOG/SQCbgktVF+qj4VY00 khTiIvib04qWKGndmnQqf0ICvABvvqxvM8pybD7dJIy+NoRF4UC9TKB66put29ac bj16hRtb1ylYWq1kIdXrMOrD61IQzgcwLUjzYvtX2vLM2oFYSANbFunj8KUPPjgq wxzoziC3fX/7J9EfpkqUWpDTfwVAKGLmkdfjc4L0ogy3wLX2upQENAvbZGffibYo h/EFLByEWkFe/my2BmhufJm7cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtZsPYh kR5FZfLC/vOn5XGsmPF7MB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChY5+WhJzn1cIQ0sCRXYv8s7Du7oDIlM+UEDMM25QUXERMaie/WD09 Jltok5O87ib7oLMsAHkpMHwSL2PBKQVHVeaEi1YeS+CFQ4LgGtH/1R8rhjnNq3nP yuBq06XO8f/eadDVNglB4G7UDKAptBrzNpG6nSBnN+HCMQdxgJTj/pm0+1Cl7oJ0 y8E69t+IAFdYqkS6dASthBWgv1KG+WrTVW8zn/gh5b2RGaI2BJgC7YXAA+Q1YNnY WdvhvGjIRJGrbYYJpbUVfxJWOdcsMFX874inC8gKxaMu/5QFi370dQvENBxapFAR US0Ho/85q6KCecSS8+pdJ6M4R7Gx7IOm -----END CERTIFICATE-----Generated at Sat May 31 15:55:06 2025 by rpki-client